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in the Tag Table sequence is non-decreasing in time. SP also verifies 
that decommissioned tags sent from the Guardian Center are absent 
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NewSuperfingerprints sent and the ones already present on User 
Device are consistent with HASH(AIISuperfingerprints). 



1610 



Supervising Program 
assigns HASH(TT) to 
HASH(TT_PREV) and 




Supervising 
Program 

resends the 
Callup. 



updates 



Superfingerprints. Set 
the User Device Clock 
to the time received in 



the continuation 



1612 



message. 

1613 



FIG. 13B 



AppNo.: 09/706,074 ^ 
Title: Method and Apparatus for Protecting ... j 
Inventors: Michael O. Rabin et al. 



18/21 



Event sent every minute. 



Event Counter 
1410 



1 1420 

FIG. 14 



AppNo.: 09/706,074 

Title: Method and Apparatus for Protecting 

Inventors: Michael O. Rabin et al. 



19/21 



User Device uses copy 
of software 




Verify that (1) H(SW)=hash value found in tag 
(2) Usage policy in tag allows usage 
at current time. 




FIG. 15 



AppNo.: 09/706,074 ^ 
Title: Method and Apparatus for Protecting ... 
Inventors: Michael O. Rabin et ah j 



20/21 



Supervising Program initiates Call-Up through 
anonymous channel using SSL. 



-1700 



Supervising Program sends time CurT.Nonce N, 
and Tag Table Identifier value ID to 

Guardian Center. 



1702 



. 1703 

CurT is 
current time and 
previous Call-Up not 
too recent? 



.1704 



Guardian 
Center 
halts 
protocol. 



Yes 



Guardian Center associates CurT with Tag Table Identifier 
value ID. Guardian Center creates a continuation message 
by forming a digitally signed message 
SGN_GC(ID I CurT I N,HASH(AIISuperfingerprints)) and 
associating that with NewSuperfingerprints. 



-1706 



FIG. 16A 



AppNo.: 09/706,074 

Title: Method and Apparatus for Protecting ... 

Inventors: Michael O. Rabin et al. 



21/21 




Supervising Program verifies the digital signature of the Guardian Center 
received in the Continuation Message. The Supervising Program further 
verifies that the Tag Table Identifier value ID,the NONCE value N, 

and CurT received from the Guardian Center are equal to the 
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Call-Up.The Supervising Program may optionally check that CurT is 
close to the time as recorded in the Supervising Program. Finally, 
the Supervising Program computes the hash function value of all its 
already received Superfingerprints, including the currently received 
NewSuperfingerprints, and verifies that the corresponding field in the 
Continuation Message equals the computed hash function value. 



^1709 

Supervising Program 
appends said 

NewSuperfingerprints 
to its existing 
Superfingerprints 

continues executing. 



1710 



1708 






Supervising 




Program 




starts a new 




Call-Up. 



FIG. 16B 



